iDefense Security Advisory 04.17.08 – Remote exploitation of multiple buffer overflow vulnerabilities in OpenOffice, as included in various vendors’ operating system distributions, allows attackers to execute arbitrary code with the privileges of the logged in user. The first vulnerability occurs when parsing “Attribute” records from the file. Due to a lack of bounds checking during a loop that reads these records, an attacker can trigger a heap overflow by inserting more than 256 records. The second vulnerability is nearly identical to the first one, but involves the “Font Description” record instead of the “Attribute” record.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/65624/04.17.08-3.txt
Source: https://packetstormsecurity.com/files/65624/iDEFENSE-Security-Advisory-2008-04-17.3.html